This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer (raw, json) Hash identifier: DxYs3UzHEVvaud4sKoBcP34VsNlsPZR1QRDzbCm3kiE= Subject key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B79EC43AF5669196595ACC04B2B39F21F Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 14:18:05 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 20907 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:43:af:56:69:19:65:95:ac:c0:4b:2b:39:f2:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cda93a702f03d6034b02c4637212a743a472c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:45:71:4e:1f:56:e1:05:f9:94:f2:93:a4:a7: ea:27:db:f6:00:35:22:01:21:37:f0:b0:fe:25:42: e8:1c:d7:e3:a1:63:ea:d1:fc:a1:95:57:08:ed:2a: f3:75:9a:c7:e6:e9:4d:4d:78:7e:79:a7:b7:d8:65: 3c:ff:fb:cb:0d:fa:cf:cd:d9:fb:57:30:b6:ff:e9: d6:96:b7:7b:d7:11:0f:47:10:2e:93:32:0f:d3:0c: 21:ba:98:57:37:82:cd:ae:eb:4f:8d:d8:f7:a7:ed: 20:0c:f1:7a:56:a2:c2:3b:33:a5:ba:73:b9:aa:27: cb:8e:61:ba:01:83:81:b5:01:1f:0e:96:00:e3:a3: 35:c3:75:81:c4:0e:86:b2:ee:37:f6:8a:9b:0d:c4: 77:65:4e:55:f5:95:f1:cc:ea:0b:54:29:36:1f:ae: 73:2f:0a:af:21:f4:23:05:e9:f9:a7:bc:07:11:58: 6d:cc:6a:c3:d7:a3:d5:91:41:f4:9c:37:90:d4:e6: 87:13:05:a7:23:d1:f5:40:ab:0d:f5:f9:81:02:60: 57:28:82:6c:01:42:45:85:9e:9f:2e:10:98:96:26: 9d:b7:a8:c5:3b:e0:1d:d0:9a:4e:f1:e5:59:d9:dd: db:a9:fc:84:4c:22:e8:bf:1c:e2:50:b0:56:01:9e: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 20907 Signature Algorithm: sha256WithRSAEncryption 1f:19:77:95:6e:8c:45:b2:70:f1:81:87:c0:1d:92:fd:dc:a7: d5:95:70:81:5f:9f:c7:4c:8c:3a:be:69:1a:9b:d0:a2:29:5e: d0:0e:fa:da:24:ab:86:89:f5:47:ac:42:11:2b:0c:69:b3:66: 76:95:3e:5d:9b:4c:b7:3f:f2:25:c2:0a:28:0f:a8:49:0e:6e: f2:bb:72:1c:f1:89:d0:0e:b1:33:1d:fe:04:15:de:07:5a:6e: 8b:fb:9d:b8:0c:93:c2:a2:31:ed:cb:2b:33:41:55:f2:58:cb: 8b:5d:bb:1a:97:0b:df:88:49:11:2c:57:af:c4:a3:88:fd:68: e8:a8:ad:27:1c:7f:66:b4:5f:27:01:5e:d4:64:7d:44:8b:a7: 1d:47:2d:9f:92:11:7e:5d:5f:b0:44:e2:81:b7:90:9f:fb:28: 66:93:37:d6:3d:57:a0:41:d1:fb:e5:03:c2:83:15:1f:f8:d7: f1:6c:13:53:46:d8:58:d2:20:04:f2:f1:24:0f:aa:5b:10:06: d0:22:fd:b2:5b:e7:89:7f:0c:23:c9:f4:3b:db:51:6f:d5:05: 19:2b:27:83:af:16:c9:72:ae:4b:35:d0:45:40:37:13:5d:75: 8b:9d:c3:74:ae:1b:fe:43:95:01:76:b3:d8:1e:60:f1:21:fc: 4f:63:19:bb -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZt57EOvVmkZZZWswEsrOfIfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2RhOTNhNzAyZjAzZDYwMzRiMDJjNDYzNzIxMmE3NDNhNDcyYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/UVxTh9W4QX5lPKTpKfqJ9v2ADUi ASE38LD+JULoHNfjoWPq0fyhlVcI7SrzdZrH5ulNTXh+eae32GU8//vLDfrPzdn7 VzC2/+nWlrd71xEPRxAukzIP0wwhuphXN4LNrutPjdj3p+0gDPF6VqLCOzOlunO5 qifLjmG6AYOBtQEfDpYA46M1w3WBxA6Gsu439oqbDcR3ZU5V9ZXxzOoLVCk2H65z LwqvIfQjBen5p7wHEVhtzGrD16PVkUH0nDeQ1OaHEwWnI9H1QKsN9fmBAmBXKIJs AUJFhZ6fLhCYliadt6jFO+Ad0JpO8eVZ2d3bqfyETCLovxziULBWAZ6oOQIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFIzak6cC8D1gNLAsRjchKnQ6RyyKMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEwL2JiMmY0 Ni0wMzBhLTRhZWYtOGI2MC1hNDY2MWVlM2M5YTYvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAvYmIyZjQ2 LTAzMGEtNGFlZi04YjYwLWE0NjYxZWUzYzlhNi8xL2pOcVRwd0x3UFdBMHNDeEdO eUVxZERwSExJby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlGrMA0GCSqGSIb3DQEBCwUAA4IBAQAfGXeVboxFsnDx gYfAHZL93KfVlXCBX5/HTIw6vmkam9CiKV7QDvraJKuGifVHrEIRKwxps2Z2lT5d m0y3P/IlwgooD6hJDm7yu3Ic8YnQDrEzHf4EFd4HWm6L+524DJPCojHtyyszQVXy WMuLXbsalwvfiEkRLFevxKOI/WjoqK0nHH9mtF8nAV7UZH1Ei6cdRy2fkhF+XV+w ROKBt5Cf+yhmkzfWPVegQdH75QPCgxUf+NfxbBNTRthY0iAE8vEkD6pbEAbQIv2y W+eJfwwjyfQ721Fv1QUZKyeDrxbJcq5LNdBFQDcTXXWLncN0rhv+Q5UBdrPYHmDx IfxPYxm7 -----END CERTIFICATE-----Generated at Mon Feb 9 15:12:25 2026 by rpki-client